Technical Information
- starts.exe
- %TEMP%\rarsfx0\starts.exe
- C:\users\public\desktop\download crazytaxi3.lnk
- DNS ASK lb######vy6s20o.olghai.ru
- DNS ASK wo######hzxwlb8.oumefi.ru
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%TEMP%\rarsfx0\starts.exe'